Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access

Security researchers have released a working exploit for a pre-authentication remote code execution vulnerability in AnyDesk's Linux version, which allows attackers to gain root access without needing approval for a connection. The flaw was patched by AnyDesk in version 8.0.3, released in June, although the changelog did not provide detailed information about the fix, and no CVE was assigned. The vulnerability is significant as it grants root access before authentication. The patch was described as fixing a bug that could cause a crash, without mentioning the security implications. This exploit gives attackers a means to elevate their privileges. The lack of a CVE assignment and detailed disclosure at the time of the patch may have limited awareness of the vulnerability's severity.